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IN THE CLAIMS 

For the convenience of the Examiner, all pending claims of the Application are 
reproduced below. 



a first tier of forwarding agents conn e ct e d to a first ti e r of network d e vic e s coupled to 
a client via a network, wherein the client is operable to generate a request that includes a 



a second tier of forwarding agents connected to a second ti e r plurality of network 



a service manager configured to: 

receive a the packet fi-om a selected one of the forwarding agents included in 
the first tier of forwarding agents : 

det e rmin e th e ti e r of the forwarding ag e nt; and 

send an a first tier instruction to the selected forwarding agent included in the 
first tier of forwarding agents directing the selected forwarding agent to forward the 
packet to a n e twork d e vic e selected one of a plurality of firewalls that is coupled 
connected to the first and second tiers tier of forwarding agents that includ es the 
forwarding agent and that is assigned by the service manager, wherein the selected 
firewall forwards the packet on to a selected one of the forwarding agents in the 
second tier; 

receive the packet back from the selected forwarding agent in the second tier; 

and 

respond to receiving the packet by providing a second tier instruction for the 
selected forwarding agent in the second tier to forward the pack on to a selected one 
of the plurality of network devices . 



1. 



(Currently Amended) A network comprising: 



packet ; 



devices; and 
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2. (Currently Amended) A network as recited in claim 1^ wherein the first tier of 
network d e vic e s includ e stat e tracking n e twork d e vic e s that k ee p track of th e stat e of 
connoctions and whoroin the service manager is further configured to: 

in th e e v e nt that th e ti e r of th e forwarding ag e nt is conn e ct e d to on e of th e stat e 
tracking n e twork devic e s, determine whether the packet belongs to a connection that has 
already been assigned to a selected one of the stat e tracking n e twork d e vic e firewalls : and 

in the event that the connection has been assigned to the s tate tracldng network device 
selected firewall , selecting the sam e stat e tracking n e twork d e vic e selected firewall to 
receive the packet. 

3. (Canceled) 

4. (Currently Amended) A network as recited in claim ^ wherein the selected 
firewall is initially chosen by the service manager for a first the packet that requests a-the 
connection^ and wherein the same -selected firewall is chosen for a s e cond an additional 
packet that responds to the first-packet. 

5. (Currently Amended) A network as recited in claim 1^ wherein the first tier of 
the-forwarding ag e nt agents is determined by the-a subnet of the first tier of forwarding agent 
agents . 

6. (Currently Amended) A network as recited in claim 1^ wherein the first tier of 
the-forwarding agent-agents is-are determined by the- a port of the first tier of forwarding 
ag e nt agents . 

7. (Currently Amended) A network as recited in claim 1^ wherein the first tier of 
the-forwarding agent-agents is-are determined by the- an inclusion of the-IP addr e ss addresses 
of the first tier of forwarding agee tagents included in a list for th e ti e r . 
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8. (Currently Amended) A network as recited in claim 1^ wherein the second tier 
of forwarding agents are also conn e ct e d operable to communicate with the first tier of 
n e twork d e vic e s forwarding agents . 

9. (Currently Amended) A service manager configured to distribute packets to 
multiple tiers of forwarding agents comprising: 

a network interface configured to rec e ive packots firom a first tier of forwarding 
ag e nts conn e ct e d to a first ti e r of n e twork d e vic e s and a second ti e r of forwarding ag e nts 
conn e cted to a s e cond ti e r of network devices; and 

a processor configur e d to: 

d e t e rmin e th e ti e r of a sending forwarding ag e nt that sends a pack e t; and 
send an instruction to th e sending forwarding agent dir e cting th e s e nding 

forwarding agent to forvv^ard th e pack e t to a n e twork d e vic e conn e ct e d to the tier of 

fon?v^arding ag e nts that includes the sending forwarding ag e nt. 

receive a packet fi:'om a selected one of a plurality of forwarding agents 

included in a first tier of forwarding agents, the packet being generated by a client that 

is coupled to the selected forwarding agent included in the first tier of forwarding 

agents; 

send a first tier instruction to the selected forwarding agent included in the 
first tier of forwarding agents directing the selected forwarding agent to forward the 
packet to a selected one of a plurality of firewalls that is coupled to the first tier of 
forwarding agents, wherein the selected firewall forwards the packet on to a selected 
one of a plurality of forwarding agents included a second tier of forwarding agents: 

receive the packet back firom the selected forwarding agent in the second tier: 

and 

respond to receiving the packet by providing a second tier instruction for the 
selected forwarding agent in the second tier to forward the pack on to a selected one 
of a plurality of network devices. 
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10. (Currently Amended) A service manager as recited in claim 9^ wherein the 
first ti e r of n e twork devic e s includ e stat e tracking n e twork d e vic e s that k ee p track of th e stat e 
of conn e ctions and whoroin th e processor is fiarther configured to: 

in the e v e nt that th e ti e r of tho forwarding ag e nt is coim e ct e d to on e of th e stat e 
tracking network d e vic e s, determine whether the packet belongs to a connection that has 
already been assigned to a selected one of the state tracking notw^ork device firewalls ; and 

in the event that the connection has been assigned to the stat e tracking n e twork d e vic e 
selected firewalls , selecting the selected same state traclcing n e twork d e vic e firewall to 
receive the packet. 

11. (Canceled) 

12. (Currently Amended) A service manager as recited in claim 4-4- 1_0^ wherein 
the selected firewall is initially chosen by the service manager for a first the packet that 
requests a-the connection^ and wherein the s^ae -selected firewall is chosen for a second an 
additional packet that responds to the first packet. 

13. (Currently Amended) A service manager as recited in claim 9^ wherein the 
first tier of the-forwarding agent-agents is determined by the-a subnet of the first tier of 
forwarding agent-agents. 

14. (Currently Amended) A service manager as recited in claim 9^ wherein the 
first tier of the-forwarding agent-agents is-are determined by flia- a port of the first tier of 
forwarding agent-agents, 

15. (Currently Amended) A service manager as recited in claim 9^ wherein the 
first tier of the-forwarding agent-agents is-are determined by the- an inclusion of the-IP 
addr e ss addresses of the first tier of forwarding agent -agents included in a list for the ti e r . 
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16. (Currently Amended) A method of distributing packets to multiple tiers of 
forwarding agents comprising: 

r e c e iving packoto at a G e r\dcQ manag e r from a first ti e r of forv\^arding ag e nts 
connoct o d to a first tier of n e twork d e vic e s and a second tier of forvv^arding ag e nts conn e ct e d 
to a s e cond tier of network d e vic e s; 

d e termining the ti e r of a s e nding forwarding agent that sent a pack e t; and 

s e nding an instruction to th e s e nding forwarding ag e nt directing th e s e nding 
forwarding agent to forward th e pack e t to a notw^ork device connoctod to th e tier of 
forwarding ag e nts that includ e s th e s e nding forwarding agent. 

receiving a packet from a selected one of a plurality of forwarding agents included in 
a first tier of forwarding agents, the packet being generated by a client that is coupled to the 
selected forwarding agent included in the first tier of forwarding agents; 

sending a first tier instruction to the selected forwarding agent included in the first tier 
of forwarding agents directing the selected forwarding agent to forward the packet to a 
selected one of a plurality of firewalls that is coupled to the first tier of forwarding agents, 
wherein the selected firewall forwards the packet on to a selected one of a plurality of 
forwarding agents included a second tier of forwarding agents; 

receiving the packet back from the selected forwarding agent in the second tier; and 

responding to receiving the packet by providing a second tier instruction for the 
selected forwarding agent in the second tier to forward the pack on to a selected one of a 
plurality of network devices. 
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17. (Currently Amended) A computer program product for distributing packets to 
multiple tiers of forwarding agents, the computer program product being embodied in a 
computer readable medium and comprising computer instructions for code such that when 
executed is operable to : 

d e termining a corroaponding tier of a sending forwarding agent that sent a pack e t 
r e c e iv e d at a s e rvic e manag e r from a first ti e r of forwarding ag e nts conn e ct e d to a first ti e r of 
n e twork devices and a socond ti e r of forw^arding agents connected to a second tier of network 
d e vic e s; and 

s e nding an instruction to th e s e nding forwarding ag e nt dir e cting th e sending 
forwarding agent to fon^vard the packet to a network device connected to the corr e sponding 
tier of forwarding ag e nts. 

receive a packet from a selected one of a plurality of forwarding agents 

included in a first tier of forwarding agents, the packet being generated by a chent that 

is coupled to the selected forwarding agent included in the first tier of forwarding 

agents; 

send a first tier instruction to the selected forwarding agent included in the 
first tier of forwarding agents directing the selected forwarding agent to forward the 
packet to a selected one of a plurality of firewalls that is coupled to the first tier of 
forwarding agents, wherein the selected firewall forwards the packet on to a selected 
one of a plurality of forwarding agents included a second tier of forwarding agents: 

receive the packet back from the selected forwarding agent in the second tier: 

and 

respond to receiving the packet by providing a second tier instruction for the 
selected forwarding agent in the second tier to forward the pack on to a selected one 
of a plurality of network devices. 
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18. (Currently Amended) A service manager configured to distribute packets to 
multiple tiers of forwarding agents comprising: 

means for r e ceiving packets firom a first tier of forwarding agents connect e d to a first 
ti e r of n e twork d e vic e s and a s e cond tier of forwarding ag e nts conn e ct e d to a s e cond ti e r of 
n e t\\^ork d e vic e s; 

moans for d e t e rmining th e ti e r of a s e nding forwarding ag e nt that s e nds a pack e t; and 

m e ans for s e nding an instruction to the sending forwarding ag e nt dir e cting the 
s e nding forwarding ag e nt to forward the packet to a n e twork device connected to th e ti e r of 
forwarding ag e nts that includ e s th e s e nding forwarding ag e nt. 

means for receiving a packet from a selected one of a plurality of forwarding agents 
included in a first tier of forwarding agents, the packet being generated by a client that is 
coupled to the selected forwarding agent included in the first tier of forwarding agents; 

means for sending a first tier instruction to the selected forwarding agent included in 
the first tier of forwarding agents directing the selected forwarding agent to forward the 
packet to a selected one of a plurality of firewalls that is coupled to the first tier of forwarding 
agents, wherein the selected firewall forwards the packet on to a selected one of a plurality of 
forwarding agents included a second tier of forwarding agents; 

means for receiving the packet back from the selected forwarding agent in the second 
tier; and 

means for responding to receiving the packet by providing a second tier instruction 
for the selected forwarding agent in the second tier to forward the pack on to a selected one of 
a plurality of network devices. 
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